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ABSTRACT 


Two models are developed for calculating the availability 
of the Harpoon Missile airborne command and launch system 
(HACLS). The first model is a semi-Markov process. Its 
assumptions are validated using the subsequently developed 
computer simulation model. Both models are exercised with 
parametric variations, the critical parameters being mean 
time to failure, mean time to repair, and severity of the 
operating environment. Less critical parameters are mainte- 
nance efficiency and, for the simulation only, maintenance 
time to repair probability distribution. A major discovery 
ietcols paper iS that the standard definition of availability 
does not prove to be adequate when used to determine system 


availability in a complex framework of operations. 
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NOMENCLATURE 


Maintenance efficiency 
Availability 


Mean value of HACLS availabilities, A. 
Availability computed by the simulation 


Auxilliary Armament Interconnect Unit 
Anti-Submarine Warfare 
Built-in-Testing 

Decreasing Failure Rate 


Detected HACLS Failure 
Undetected HACLS Failure 


Harpoon Airborne Command and Launch System 
Harpoon Data Processor 

Harpoon Logic Unit 

Harpoon Shipboard Command and Launch System 
HACLS Status 

Increasing Failure Rate 

Increasing Failure Rate Average 


Random Variable, Length of Idle Period 


Intermediate Maintenance Activity 

A variable indicating simulation event code 
Environmental Stress Factor 

Failure Rate 


Laboratory Failure Rate 





MCP 


MDAC-E 


MSTOP 


MTTF 


MT'TR 


NALERT 


NOK 


Or. 
i 


OK 


WRA 


Critical Mission Failure Rate 

Lower Confidence Bound 

Life Cycle Costs 

Mean Time to Repair 

Missile Control Panel 

McDonnell-Douglas Astronautics Company-East 
A GASP variable used to stop the simulation 
Mean Time to Failure 

Mean Time to Repair 

A variable to count number of alert launches 
A variable to count number of successful launches 


Random variable, Length of Operating Period 


HACLS Up 
Repairability, Availability, and Maintainability 
Search and Rescue 


Time to Fail in HACLS Mode, 1 


Time to Failure 
Time to Repair 


Total System Up Time 


Random variable, Time to Repair 


Weapon Replaceable Assembly 





I, INTRODUCTION 


Weapons availability and reliability studies are appear- 
ing frequently of late, much of the interest being motivated 
by the Air Force Project ABLE [1] which attempts to quantify 
the effects of reliability, availability, and maintainability 
(RAM), Project ABLE points out the need to improve RAM 
of new systems and to provide RAM growth for existing ones 
mmorder to reduce system life cycle costs (LCC), albeit at 
increased initial aquisition costs [2] 

In order to more accurately determine LCC, a reasonable 
effort to calculate weapon system reliability and avail- 
ability is needed, For existing systems the calculation 
depends chiefly on gathering maintenance data, available in 
the Navy from its 3-M maintenance system data bank. For a 
new system, however, lack of such operational data requires 
that an analyst model the proposed system operation, make 
certain assumptions, and base calculations on reasoned judg- 
ment concerning projected system operation. 

This paper outlines two models of Naval aircraft squadron 
operations from which single subsystem availability is 
determined for the Harpoon missile airborne command and launch 
system (HACLS). HACLS is a system composed of four weapon 
replaceable assemblies (WRAS), and various other components. 
The WRAsS are missile control panel (MCP), Harpoon data 


processor (HDP), auxilliary armament interconnect unit (AAIU), 
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micmiaregoon lorie wiit (HLU). HACLS has a built-in testing 
feature (BIT) which affords the operator a functional check 
of the system before and during a HACLS mission, while 
creating the most severe operating environment for the system. 

As with all avionic systems HACLS is subject to periodic 
failures which render it unavailable for performing its 
designed functions. The resultant availability determined by 
the models is the probability that HACLS is operational ona 
randomly selected aircraft at a randomly selected time, given 
that the aircraft is functional. With suitable changes in 
mean time to failure (MTTF) and other critical input param- 
eters the models can be exercised to give an availability 
figure for any aircraft subsystem, | 

The primary model, analytical in nature, is supported by 
a digital computer Simulation model. After these models have 
meemedeveloped for the reader, parametric results are 
presented and an application of the resultant availability 
is shown. 

The concept of availability is explained and its 
application to the models is shown. Although availability 
is developed in the classical manner, some different perspec- 
tives are developed. One of these is the notion of probabil- 
ity that HACLS is up at the beginning of a scheduled operating 
period. Others are operational availability and logistic 
availability, 

Reliability data for the Harpon missile system, provided 
by McDonnell-Douglas Astronautics Company-East (MDAC-E), is 
used as an input to the availability models developed herein. 
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Pare AL LABILITY 


A, GENERAL 
To develop the concept of availability the following 
Stochastic process is defined, Let {W(t),t>0} denote a 


Pertormance process, such that 


ioe ino nmdicwmtlec sls Lunctloning at time, t, 


= 0 if the device is failed at time, t. 


Figure 1 shows this performance process. 


Wit) 





PERFORMANCE PROCESS 


FIGURE 1 
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Let A(t) = Pr{W(t) = 1], and ACO) = 1, i.e, ACt) denotes 
mie probability that the device 1s functional at time t. 


Note that E[W(t)] = ACt). 
Define 


A = lim A(t) 
{0 

if the limit exists. Therefore, A could be considered the 
probability that the device will function without regard to 
when its performance iS required, This limiting availability, 
issih practice, most often called "the availability" but 
meiore preeise term for it iS asymptotic availability. 

In developing the models described in this paper an 
important variable is the proportion of time a device or 
Meee toe2i) an up, 1.€. functional, state. This proportion 


is derived as follows: if wip Ee represents the total up 


fmme Of the system by time t, then 


t 
dh = f W(s) ds. 
* a) 


The expected proportion of up time from time = O to time = t 


is then 


: 
yp: (2 ©) > if ACs) ds)/t, 


A theorem relating A and expected proportion of up time 


follows, 
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Theorem 


Suppose A = lim A(t) exists. Then, 


$70 


iim © .(t)/t exists, 
700 up 

and is equal to A, 
Proof of the above is theorem is given in Appendix A. 
It can be shown [3] that with exponential times to 


failure (TTF) and exponential times to repair (TTR), 





ACt) = <5 + xray expl-Q + 1/u)tl, £20; 
where 
} = failure rate = MTTF7}, 
uw = mean time to repair, MTTR. 
Jou gsye 


A = lim A(t) = ee 


gale aioe 


t7a 


and, after simplification, the final form of A is 


A = MTTF/(MTTF + MTTR), Gly) 


B. USE OF AVAILABILITY THEORY IN THE MODELS 

Equation 1 holds for more general cases than exponential 
failure and repair times. In particular it holds when times 
tO failure and times to repair are independent, identically 
distributed random variables. 
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In the first of the following models HACLS availability 


is defined as 
A = Pr[HACLS is up at a randomly selected time], 


This limiting probability is determined using a semi-Markov 
process, 

The second model, a computer simulation, calculates 
availability in two ways: 


{i) By using a mathematical expression equivalent to 
equation 1, 


(ii) The status of HACLS systems is sampled at random 
times, thus creating a sequence of Bernoulli trials. 
After an adequate number of trials are performed, the 
number of successful trials is divided by the total 
number of trials, the result being an unbiased estimate 
eae A. That is 


Rest = ececees! trials’ (2a) 
or equivalently, 
est aa Senne | eal” (2b) 


Equation 2a provides availability by the following argument: 
eamce for a Bernoulli random variable, W, with success 
probability, p, E{W}] = p; the quotient in equation 2a is an 
mieiased point estimate of p. In an availability context p 
would be replaced by A(t) since, by definition, W(t) of the 
stochastic process {W(t),t>0} is a Bernoulli random variable 
when sampled at time t. Also, a sufficient number of trials 
is run, creating a limiting process which nullifies the 
mine dependence of A(t), thus giving the desired result, a 


point estimate of A. 
15) 





The expected range of availability values for HACLS is 
0795 - 0.999,.,.. Therefore, an adequate number of simulated 
trials, assuming normal sampling theory is computed as 
follows, 


et A, is the point estimate of A determined by the 


st 
Simulation, and a nominal value of 0.975 is used for A, a 
lower confidence bound (LCB) may be computed. Recalling that 


Bost is an estimate of the Bernoulli parameter, A, the 


applicable 90% LCB is A, - €, where 


st : 


PereAyi/n)*/? ZL being the goth percentile 


4.90 0,90 


meeene Standard normal distribution, implying a 90% LCB. 
ieee With € = 0,005, and after solving the above equation 


for the sample size, n, 
me ¢Z, ..fe)- A(1 = A) 
0.90 


(1.2815/0.005)° COmo7o 700.025) = 1601, 


Therefore, the number of simulation runs is 1601. For the 
remainder of this discussion "A" will be used to denote both 


se and asymptotic availability, the use being made clear 


from the context. 


as 





III, FRAMEWORK OF SQUADRON OPERATIONS 


Preure 2 shows the daily scenario of operations for a 
P—-3 squadron, Time spent in each of the HACLS operating 
modes is shown for each aircraft. HACLS is checked for 
Mmeoper Operation on both of the alert aircraft and on any 
aircraft that flies a Harpoon mission. These checks consist 
mea Pround operating check, during which BIT is exercised, 
mes eround operation for the remaining preflight period. 
Peoula an aircratt fly with Harpoon, BIT is used one 
meartional time prior to the missile launchings. All except 
two hours of the remaining flight time is spent in in-flight 
eeemaoy mode of HACLS operation. Note that when a HACLS 
merent 1S parametrically inserted into daily operations, a 
MeeeieOot three preflight checks occur on that day. Moreover, 
the aircraft flying mission 3 has eight hours of HACLS 
mb ight operation. 

meowrPe 3S depicts the HACLS transition trees, It shows 
the transit from the three states: OK (HACLS up), 


PF  fundetected faire), and F (detected failure-in repair ) 


to those same states on a subsequent day. Primes indicate 
Meaislitional states. 

Semsiaering that HACLS starts OK, and functions reliably, 
mmmeransits to OK. If however it fails, it can go into Fup 


Phe repair state, and if it is repaired before the next day, 


IL fs 
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mao system iS again OK. If, however, maintenance action 
is completed but due to poor workmanship, the system is not 


mmeract repaired, it transits to Boe On ene Ouner hand. ii 


maintenance is not completed by the beginning of the present 


day, HACLS remains Bae imiiaily, 1f BACLS is not preflight 


checked, the system remains Boe The remaining trees of 
figure 3 show the transits from ae and By to the possible 


states of the present day. 

mr terms Gi Markovian theory, the transitions depicted 
mem oa pOSitive recurrent, aperiodic, and irreducible Markov 
fmmeeess, 1,.€, 1 18 irreducible ergodic. This property 
becomes cruicial in the development of the following 


analytical model. Note that the difference between EY and 


Fy depends on whether the HACLS is checked, i.e. operated. 
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IV. ANALYTICAL MODEL 


A model developed by MDAC-E determines the availability 
of the Harpoon shipboard command and launch system (HSCLS) [4]. 
The system, as envisioned, is to be checked daily for proper 
operation, and furthermore, it may be subjected to use on an 
alert mission. This model is ee ee in a straight-forward 
way Since the time of shipboard daily operational system test 
periods is somewhat predictable. In developing a model for 
an aircraft squadron, the problem changes, since there are 
memenor more aircrait, whose HACLS are checked infrequently 
and in a non-deterministic fashion. Therefore, the following 
model is developed. 

This section describes an analytical model of the 
operations of three types of Navy aircraft squadrons. The 
objective of the model is to determine the availability of 
the Harpoon missile airborne command and launch system (HACLS). 
This model gives availability of the HACLS subsystem given 
Mifeits parent system, i.e. the aircraft, is functioning 
properly. Availability in this context is defined as the 
meeopadlility that the HACLS is in functional condition at a 


randomly selected point in time, 


A. ASSUMPTIONS 
As formulated this model iS responsive to: 


Meech Reliability (R). In accordance with accepted 
reliability theory it is assumed that the exponential 
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distribution adequately describes the time to failure 

of most avionic systems, Furthermore, the exponential 
distribution readily lends itself to analytical modelling. 
Therefore, reliability would be of the form, 


R = Pr{T. > tJ ~ exp(-k. Ay t.), t, 20. 


One random variable qT; , HACLS time to fail when in 


operating mode i, is assumed to be exponential and the 
system failure rate is Kk. Ay In general a failure rate 


fay De a function of time, i.e. A = A(t). This dependence 
on time gives rise to decreasing failure rate (DFR) 
ott i DUtilOns, increasing failure rate (IFR) distributions, 


and others. In this model, however, Aye the laboratory 
failure rate 1S assumed to a constant equal to 0.0011 
[failures per hour] over all HACLS modes of operation, 


pac the multiplier K, Varlbesmaccording to the severity of 


the operational environment, The vector of environmental 
k-factors is shown as Table I, 


A high k-factor indicates a more severe mode of operation 
mmevice versa, A scalar k-factor, MS ogre based on a 


time - weighted average of the k's, is used for the 
maelytical model. In order to apply this Soap one must 


assume that there exists no shock effect when HACLS goes 

from one operating mode to another. An additional assump- 
irom 1S that the derating effects of one mode of operation 
Memmot interact with those of another. The calculation of 


k 1S included in Appendix B. 
ave 


foe Maintenance Time to Repair (U). Although times to 
failure of avionic systems are generally assumed to be 
exponential, there exists some controversy over the distri- 
meron Of U. It 1S popular among reliability analysts to 
assume that U has a log-normal distribution. However, a 
log-normal distribution presents mathematical difficulties, 
causing the resulting model to become analytically 


meetactable. ‘Moreover, as Thompson points out in [5]:, very 
often samples from log-normal and exponential distributions 
Mmeenindistinguishable. Finally, if in fact the distribution 


of U is log-normal, the assumption of an exponential U with 
a constant MTTR, u, would yield a valid point estimate of 
evallability by the following argument. It is clear from 
equation 1 that asymptotic availability depends not on 

meee aistributions of TTF and TTR, but on their means. 
Therefore, if one accepts equation 1 with its aforementioned 
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restrictions, asymptotic availability, A, would be equal 

for the exponential TTF--exponential TTR and the exponen- 
tial --- log-normal cases. Thus, in the analytical model 
U is assumed to be exponentially distributed with a mean 

mme tO repair, wt, equal to 24 hours, 


3) Maintenance Efficiency (a), a is defined as the 
probability that HACLS is in fact repaired, given that 
mepalr action on the faulty WRA is completed, Equation 1 
may be modified to account for maintenance efficiency; 


A = MTTF / [MTTF + (MTTR/a)], (3) 


It is evident from equation 3, that as a increases, the 
asymptotic availability increases, an intuitively appealing 
result. The expected range of values for a is 0,.80-0.95. 
To provide a worst-case analysis ana of 0.80 is chosen. 


4) The HACLS operating scheme; i.e. the length of HACLS 
idle periods and operating period length. The operating 
wetradods are two hours or eight hours long for preflight 
checks and Harpoon flights, respectively. By specifying 
the number and frequency a probability mass function for 
length of operating periods may be deduced. The density 
function for idle period length may be determined through 
computer simulation, 


The main question addressed by this paper is: How do 
parametric variations in length of idle and/or operating 
periods affect availability? The model developed to answer 
this question iS a semi-Markov process, that is an alternating 
renewal process containing an imbedded Markov chain. 

An example motivated by Cox and Miller [6] follows, 

Suppose a piece of equipment can be in one of two 
memes, | if it is up and 0 if it is down and in repair. 
It is assumed that the equipment is constantly monitored 
and that as soon as it fails it goes into repair (state QO). 


Figure 4 depicts a semi-Markov process representing the 
Satus OL the equipment over time. 
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Wit) =I Wit) = | 


Wit)=0 


Simple Alternating Renewal Process With an Imbedded 
Markov Chata 


FIGURE 4 





imines associated transition Matrices one for the x, 
renewals and the other for the Ys renewals, are as 


follows: 


fer A. to Y., 
i 1 


4 et 
Osq,<1 
Q = , 
O<qo<1 
1 = 49 do 
and for YG to Koag 
ry 1 - ry 
Osr,<1 
R = ’ 
Osro<l 
eee Ls lo 
then for x; to Koay? 
q,r,t(1-q,)(1-ro) q,(i-r,)+C1-a4 ro 
(1-d5)r,t+q5(1-ro) (1-q,)(1-r, )tdo%o 


is the transition matrix. 
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B, MODEL DESCRIPTION 

The model described in this paper considers one aircraft 
and tracks its HACLS status through time. The HACLS 
installed aboard that aircraft may be in any one of three 
states: 1, the functional state, 2. the failed state, and 
3. the system-under-repair state, Furthermore, the system 
may be functioning or it may be idle, with some probability, 
aera €1ven point in time, The functioning or operating 
periods are fixed both for preflight checks of HACLS and 
for Harpoon carrying missions, HACLS idle periods within the 
daily operations are distributed exponentially. 


Figure 5 depicts the alternating renewal process used 


to model the status of HACLS., 


Witt) =1 W(t) =1 





i { i*| 


oemt- Markov Process Used in the Analytical Model 
FIGURE 5 
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The distinction between state 2 and state 3 is as 
follows: HACLS is subject to unobserved and observed 
failures. For the sample replication shown in Figure 5, if 
the system fails during an idle period, the system goes from 
state 1 to state 2 (undetected failure), but if the system 
fails during an operating period, it goes from state 1 to 
eens, since the faiiure is immediately detected. Further, 
if the system were in state 2, it could transit to state 3 
(when the system is exercised, and the failure discovered) 
and subsequently from state 3 to state l, 


iemiingsavatlability, iet a) be the probability that 


MmiemHAChs 1S in state j at time t, Then, 
A(t) = P(t), and 


A = Pi, where Py = Jim Ue op oe 
C700 1 


To determine P define the state variables, 


ae? 


state at start of jes Operating period.. ‘and 


P< 
lI 


Staterat Start of age “Clues (exetealoyel 


re 
I 


1 if HACLS is up; 


Zeet HACES ws down; 


SeitenAcCio 1S in repair. 


Referring to figure 5, the transitions from x to V5 


are shown below. 
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A description of the transitions from Y; co 


i 


iy 
2 


3 


II 


II 


wie woeitoeipeae the end of 0.5 
With epropallity Zero: 


if in repair at the end of O;. 
or X. = 3, 
i ! 


Cet otc peat the end of 05; 
with probability zero; 


Hiweiierepalr at the end of O;- 


etal 


1 if HACLS remains up through I. ; 
mete at fails in I. ; 
Bevwiunh probability zero, 


Vaeeh probability zero. 


1 if repair is successfully completed in I. and 


the system stays up to the end of Is; 

74 ALE 

(i) repair is unsuccessfully completed in I|, Ons 
(ii) repair is successfully completed in I., but 


HACLS fails again before the end of I. ; 


3 if repair is not completed in I. 
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follows, 





The transitions from the x to the Xoy renewal are 


1 


described as follows. 


ma xX. = 1, 
a 
43 a eee 
(i) HACLS stays up through 0. and I, one 
Git) piAGibosraric in 0. , and is successfully 
repaired before the end of I; 
= 2 if HACLS stays up through O;; and fails “in Ii; 
—meorltenAChos fatls in 0; and repair is not complete 
by the end of I.. 
ie Xk. = 2, 
1 
X44 = 1 if HACLS is repaired by the end of I. ; 
= 2 with probability zero; 
= 3 if HACLS is not repaired by the end of I. . 
mex. = 3, 
it 
Keay = 1 if HACLS is repaired by the end of I.; 


2 if HACLS is not successfully repaired by the end 


Or 1 ...3 
1 


3 if repair action is not complete by the end of I.. 


Define the transition matrices P Pp and P as follows: 


EMS Bis 


P, depicts the transition probabilities for x. to Ys, 


P, @Geplets the transition probabilities for Y; to Asad: 


and P = P,P,, depicts the transition from x. to X. . che 


AB ee 
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development of the entries of P 


Appendix C. 


Letting A 


= k 


ave 


r 


L? 


1 


Pp 


B? 


and P is included as 


O0(s) and I(s) be the Laplace transforms of operating and 


fale time probability mass and density functions, respectively; 


waa iurther, 








oe Ati/u 
»p = On 
Atl /y 
O/T 
en 1 /u=) 


-/ 


cis Ceti), 


7a 
A+1/u 


OG eae ih), 


[I¢A) - I(1/u)] 


aot = C = Hoel 1); 


x = arbitrary non-negative 
a 0 
Py = ie 1D 0 
1 - b O 
1(d) t=) CX) 
Pr = x x 
c d 


om 


, 


Siaiees 


-~ a 


x , and 


T(1/u) 





al(A)+(1l-a)e i) yt Cl—ayd Clad) 


P=P .P.=| (1-b)I(A)+be (ieb)[1-I1(A)]+bd  bI(1/n) 


(1-b)I(A)+be (1-b)[1-1(\)]+bd  bI(1/n) 


Since the Markov chain at points x is irreducible 


ergodic, there exists a solution to the following equation: 
"= T(P,Pp). 
The elements of the vector, 1, are as follows, 


PriQk at the start of operating period] ; 


= 
i 


> 
i 


Prir at the start of operating period]; 


= 
il 


3 PrlF, SEE hewstarth Of Operating period) . 


The solution for TT) is 


— (1-b)1(A)+be 
i 1-O(A+1/u) [1(A)-c] 


Solutions for Te and Tey arthourh readily calcubkabple ean 


each be taken to be approximately equal to (1-7, )/2, 


To compute Ps note that 


7 = the (long-run) proportion of transitions which 
are into state j, and define 
W, = the expected time spent in state )j per transition. 
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Ross [7] develops an equation which yields P,, the 


desired limiting probability, 


3 
P, = t.w,/ »: Thee 
if: 5 eae 421 To} 


Rigorous development of the Me is beyond the scope of this 
paper, but if one assumes that Me = iG E(O, + rod, 1FONe 


j = 1, 2, 3, a vector, w, may be calculated. For example 


with E[O,] = 2 hours (no HACLS flights) and E{I,] = 90 


hours, EO, + I] = 92 hours. With 


(0.949, 0.02505, 0.02505), which gives 


I 


a7 


Womens o, 2.346, 2,346), the resultant Ps is 0.998. 


= 
I] 
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V, COMPUTER SIMULATION MODEL 


The computer simulation model is written in the GASP IV 
programming language [8]. It is a Monte Carlo simulation of 
a Naval P-3 aircraft squadron on an overseas deployment, 
engaged in peacetime operations. At randomly selected times 
memcay, 1601 successive Harpoon alert flights are "launched" 
and the number of successful launches is divided by the 
momoer Of attempted launches. The resulting quotient yields 
mec avallability, A. 

The following is a description of simulated P-3 squadron 
operations, but suitable programming changes can be made to 
allow the user to apply it to S-3A or A-6 Squadrons, as well. 
Availabilities discussed in this paper for the latter two 
Squadrons are determined from the foregoing analytical model, 


however. 


A. ASSUMPTIONS 


meeelnis model assigns aircraft by identification number 
mo) tO the various missions outlined in figure 2. All of 
ese alrcrait/mission assignments are shuffled at the 
completion of each simulated day, with the exception that 
one of the aircraft in the non-flying, grounded status 
remains so for one simulated week to satisfy a real-world 
aircraft (not HACLS) maintenance constraint. 


2) The simulation causes alerts to be scheduled as 
merrows: one per day at a random time between t = 0 

and t = 24 hours. The strike force consists of the 
meeay-alert 1 and 2 aircraft, and either the operational 
aircraft 1 or 2 depending on which one is not flying at 
the time of the alert. 
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moe ohould the alert be scheduled during the first hour 
of the day, the aircraft from the respective missions of 
the previous day are assigned to the strike force. 


4) One test bench is available for the repair of HACLS 
failed components. If the test bench is occupied, failed 
WRAS go into a maintenance queue, 


5) Replacement spares are unavailable, and thus each 
failed WRA goes into an under - repair state as soon as 
failure is discovered. 


6) GASP provides a set of parametrically controlled 
random variate generators giving the user a choice 
Pencerning the maintenance completion time probability 
distribution. For this simulation the maintenance 
eemolecion time tunction is parametrically varied from an 
exponential to log-normal probability density, each with 
an arbitrary mean of 24 hours and standard deviation of 

4 hours, since no empirical maintenance information yet 
exists on HACLS at the time of this writing. 


fess in the analytical model, time to failure, TTF, is 
memed tO be exponential, a distribution characterized 
byea constant failure rate for all values of time. The 
Simulation program could be modified to provide for wear-in, 
decreasing failure rate (DFR), or wear-out, increasing 
failure rate (IFR), of HACLS, However, that modification 
is not made because it is unclear whether the system would 
consistently exhibit wear-in or wear-out throughout its 
lifetime, since the true distribution is probably of the 
increasing failure rate average (IFRA) class. The IFRA 
character is implied since HACLS is composed of elements 
which themselves probably have exponential TTFs [3]. 

An IFR distribution would imply wear-out, only. Thus, the 
no-wear exponential is used in order to avoid making a 
Significant error in TTF determination. 


B,. CONCEPT OF GASP IV 

References 8 and 9 provide examples of simulations and 
a full explanation of the GASP IV simulation language. The 
GASP language provides the user a tool with which he may 


mecer discrete, continuous, or discrete - continuous processes. 


Since the HACLS availability model is perceived to be discrete, 
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that mode of GASP is employed. A functional flowchart of 
GASP is shown as figure 6, 

Figure 6 describes the logic flow of the GASP IV 
computer simulation language as it applies to a discrete 
event, variable time increment model, The user-supplied MAIN 
program contains a FORTRAN command, "CALL GASP," which it 
executes after each parametric change in the value of 
maintenance efficiency, a, is made, After GASP is called 
for each of the three values of a run, the following chain 


mie vents is set into motion: 


1) Input cards are read, GASP initializes files and 
GASP variable arrays, 


2) GASP calls subroutine INTLC to intialize non-GASP 
variables. 


3) The simulation begins and GASP advances the clock to 
the time of the next event and generates the event code, 
aX. 


4) GASP calls subroutine EVNTS(IX) and a computed GO TO 
statement calls the user-supplied subroutine corresponding 
meomthe event of code, IX, 


5) GASP continues to advance the clock and schedule 
events as above, checking to determine if the stopping 
variable, MSTOP, has been set to a negative value, The 
program sets MSTOP equal to -1, after the desired number 
of replications, causing GASP to stop the simulation and 
print out the results of the run, 


C, MODEL DESCRIPTION 

The following is a description of this GASP IV simulation 
model. As before, the model utilizes an exponential reli- 
meric y function, R., of eres r t.), ie el ee aS ee Spr © 


L 1j- 
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START 


Main Program 


Inittalitze 
nor.-GASP 
Variables 


Subroutine INTLC 
Inttictlize 


non- GASP 
Variables 


Event Event Event 
Type | Type2 TypeN 


Subroutine EVNTS 
Select 
appropriate d 
event 













Remove 

time - event 
from 

event fiie 











Advance time 


t 
time of event. 
set event code, 










Subroutine OTPUT 
Perform end -of- 


Simulatlon and 


User-pro grammed 
reporting 





Subroutine SUMRY 
Print GASP 


summary report 






END 


Functional Flow Chart of GASP IV 


FIGURE 6 
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Pein Che k-factors used are listed in Table I, Time, thy) 


is determined from the matrix shown in Table II. This T 
matrix represents the time during a simulated day that 
Mernadividual aircraft, i€i=1,...,9), spends in operating 
mode, j(j=1,...,6). Also, there are assumed to be no start- 
up shocks when HACLS goes from one operating mode to another. 
Finally, as before, the derating effects of one mode do not 
interact with those of a mode entered subsequently. 

The model is run with daily rotation, weekly rotation, 
end of HACLS maintenance, and alert launch events. Figures 7 
amano Show the logic flow of the simulation. All aircraft 
Start with UP HACLS, An initial DAILY event (IX=1) is forced 
in order to start the simulation. Subroutine STATUS is 
fiemecartled from subroutine DAILY to check for failures on 
6€ach aircraft during the preceeding 24 hour operating period. 
Ti the HACLS has failed on an aircraft and its failure is 
discovered, subroutine MAINTC INDEX), where INDEX = aircraft 
Side number, is called and an end of maintenance (subroutine 
EMAINT) event is scheduled. Moreover, if the failure occurred 
on an alert aircraft, subroutine REPLAC is called and another 
[meeratt (HACLS UP) is substituted for it. After all aircraft 
have been checked for failures, the aircraft assignments of 
the new day are finalized. Upon return to subroutine DAILY, 
an alert launch is scheduled. On the basis of ZHOUR, the 
time of alert launch, a check of HACLS status (HSTAT) is 
Made and the availability calculation is initiated. The 


launches are aggregated into either launch time less than 
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TABLE [I 


PREVIOUS HACLS MODE INDEX 
DAY MISSION 

ASSIGNMENTS iL 2 3 4 5 6 
1 (ALERT 1) 22 0 1,98 Gro 0 0 
2 (ALERT 2) De) 0 1,98 0.02 0 0 
3 (OPERATIONAL 1) 14 10 0 0 O 0 
4 (OPERATIONAL 2) 14 10 0 O 0 0 
5 (TRAINING A) 21 3 0 0 0 0 
6 (TRAINING B) 21 3 0 0 0 0 
7 (TRAINING C) 20 4 0 O 0 0 
8 (NON-FLY 1) 24 0 0 0 0 0 
9 (NON-FLY 2) 24 0 0 O 0 O 

T MATRIX 


Entries are the number of hours, by mission category, that 


HACLS is in the various operating modes. 
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WRA on test bench; 
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> Subroutine ALERT 
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Check HSTAT of 
both alert a/c and 
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available 3rd 
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40 





Call Subroutine STATUS 
to finalize arrcraft 


mission assignments on 
the basis of HACLS 


stafus as determined 
by Reliabillty 





¢1 impiles HACLS OR 
HSTAT(:)22 implies HACLS F, 


HSTAT() #3 implies HACLS Fg 
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Call Subroutine STATUS 
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or equal to 12 hours or launch time greater than 12 hours. 
Then a Monte Carlo check compares a random number against the 


@eiabillity function value, 


R. = oes dy, bag cae 


ne vos come irom eiltiaer Table III, if launch time SoZ 
meurs or Table IV, if launch time > 12 hours after the start 
Sieche simulated day. No updating of HSTAT is done, since 
this is a pseudo-launch, used only to determine the value of 
mies bernoulli performance variable, Two counter variables 
ere introduced, one (NALERT) to count the number of alert 
launcn replications, and the other (NOK) to count the number 
of successful alert launches, 

"Successful" is defined in two different ways: (i) The 
two alert aircraft are launched, and one non-alert aircraft 
is launched; if the HACLS belonging to all three aircraft 
are up, the launch is considered successful (refer to figure 


7A). St fwuhene calculated using equation 2a. Since Ne 


Sst 
is based on the availability of three aircraft it should be 
approximately equal to Ne as shown in Chapter Vil a 1) ee tie 
HACLS status (HSTAT) of each of the squadron's aircraft is 
Mevermined and a tally of UP HACLS, by aircraft, is kept 

meee ne 1601 replications. The resulting number of successes 


memaivided by the number of trials for each aircraft, and 


then averaged over all the aircraft. 
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TABLE III 


PREVIOUS HACLS MODE INDEX 
DAY MISSION 

ASSIGNMENTS i 2 3 4 5 6 
/eCALERT 1) 10 0 1.98 0.02 O O 
PeCALERT 2) 10 0 1.98 0.02 0 0 
3 (OPERATIONAL 1) 4 8 0 0 0 0 
4 (OPERATIONAL 2) 2 10 O 0 0 0 
5 (TRAINING A) 9 3 0 0 0 0 
6 (TRAINING B) 9 3 O 0 0 O 
7 (TRAINING C) 8 4 O 0 0 0 
8 (NON-FLY 1) 2 O O 0 0 0 
9 (NON-FLY 2) 12 O 0 0 0 0 

Til MATRIX 


Entries are the number of hours by mission category that 


HACLS is in the various operating modes. 
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TABLE IV 


PREVIOUS HACLS MODE INDEX 
DAY MISSION 

ASSIGNMENTS iL 2 3 4 5 6 
1 (ALERT 1) 12 O O O O O 
BeCALERT 2) 12 O O O O O 
3 (OPERATIONAL 1) 2 10 O O O O 
4 (OPERATIONAL 2) 4 8 O O O O 
5 (TRAINING A) V2 O O O O O 
6 (TRAINING B) ee O O O O O 
7 (TRAINING C) 1 O O O O O 
8 (NON-FLY 1) 12 O O O 0 O 
9 (NON-FLY 2) 12 O O 0 O O 

T2 MATRIX 


Entries are the number of hours by mission category that 


HACLS is in the various operating modes. 
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meeure SA Shows this alternative calculation of 


availabilities, A; , Pino.  olideeayveraging to get 


n 

fee) (1 /n) Po A. 

In the simulation runs both ee and A are calculated. veers 
may be considered an operational availability in the sense 
that it represents the launch success probability as seen by 
an operational commander. A, on the other hand, represents 
a logistic availability since it is based upon sampling 
HACLS status of all aircraft assigned to the squadron, and 
Mere just the ones which would be tasked to fly the strike 


missions. The following asymptotic availability is 


computed: 
A = 1 - (Down Time)/(Total Time). (4) 


By probability theory, equation 4 is mathematically 
equivalent to the standard definition of asymptotic 
availability (equation 1). However, since the simulation is 
responsive to maintenance efficiency, a (a < 1.0), the 
meouttant value of A should correspond to that calculated 
using equation 3. This availability calculation is made in 
order to verify the other availability computations 
described above, 

To parametrically insert HACLS flights into the daily 
Operation scheme, an indicator variable, IHAC3 (not shown in 


meee tlow charts), is set to 1 for a day with a HACLS flight 
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or O for a day without a HACLS flight, On days with a HACLS 
Blaeht the aircraft assigned to mission number 3 files the 


Harpoon mission. Therefore, Re is MoGdiimredsto reflect the 


more severe HACLS operating environment, as follows: 


R, = I Ay ta), fediy eee 


where to. comes from Table V, 


1 


TABLE V 
PREVIOUS HACLS MODE INDEX 
DAY MISSION 
ASSIGNMENT 1 2 3 4 Oo 6 
3(COPERATIONAL 1) 12 4 1,98 0.02 3D) 6 eis: OZOZ 
Poo VvECTOR 


After approximately 1601 replications the run is termi- 
nated and the results are printed out. These results include 
memes Of availability calculated using equation 2a with the 
counter variables NOK, NOK1(*), and NALERT; availability from 
equation 4, and A. The actual computations of the avail- 
abilities take place at points where no HACLS are in a failed 
meere. therefore, if at 1601 replications there exist any 
eae d HACLS, the simulation run is continued until they 
Nave been repaired, Additional runs with parametric varia- 
tions of a are made and after all are completed, the 


Simulation terminates. 
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An earlier version of this model is in published form 
as [10]. Changes incorporated in the present model include 
a random aircraft/mission rotation scheme having replaced a 
deterministic one, and the parametric incorporation of 
fissile ~eecomrying training flights) in the simulation. 
Additionally, in order to verify the response of the computer 
model and to validate some assumptions of the analytical 
model, parametric runs varying maintenance time (U) 
distribution type and mean time to repair, wu, are made. 

Additions to the simulation in support of the analytical 
model include: 1) More than one method of availability 
computation is employed and ii) <A temporary program change 
is used to empirically determine the distribution of idle 
time periods. 

In addition to the above support, sensitivity analyses 
performed using the simulation model are bases for some 
assumptions of the analytical model. Therefore, the GASP IV 
model provides a basis for verifying the Markov chain, alter- 
nating renewal process model and for validating some of its 
assumptions, Furthermore, because sampling in the present 
model occurs at points in simulated time at which no HACLS 
are failed, a previously programmed ''steady-state" check has 


been eliminated. 


D, DISCUSSION 
The assignment of two aircraft to alert status is 
consistent with existing operational procedures at P-3 


overseas deployment sites. That is, the alert mission used 
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maecthis model exists in reality to provide ready aircraft 
for AoW, SAR, and surveillance missions, as well as for 
quick-load weapons-carrying missions, which in the future 
would include Harpoon. Since these ready-alert aircraft 
receive complete preflight checks daily, it is a rare event 
that either of them would be in a HACLS failed status. 

Since the P~3 operational commander requires fully operational 
aircraft for the alert role, once a failure in any system is 
Metected during an alert aircraft preflight, either the 
@Siure is isolated and the faulty component replaced, or a 
meey up aircraft is substituted for the faulty one. [In 
this model, the latter worst-case situation is assumed when 
a HACLS fails. 

The criterion for determining the number of successful 
alert launches for the calculation of availability using 
equation 2 is considered a workable one since, over the 
meproximately 1601 replications of alert launches, the HSTAT 
meee third aircraft in the alert strike force would be 
mepresentative of a typical nonalert aircraft. Thus, it 
would provide a reasonable sample for availability determi- 
nation. This contention is borne out when one compares 


mas value of A with A. 
est 


Concerning the scheduling of the end of HACLS maintenance 
event, it is felt that, because the weapon replaceable 
assemblies (WRAS) are intended to be removed and replaced 
immediately upon detection of a failure, a worst-case analysis 


model would consider that replacement spares are not 
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Semearacrely available. Alternatively, one could consider 
that the failure is not immediately isolated and therefore 
meompt HACLS repair by WRA replacement is not feasible. 
Nonetheless, this simulation labels each failed WRA with 
[mea respective aircraft identification number and, depending 
upon the Navy Intermediate Maintenance Activity (IMA) test 
bench availability, the WRA is placed on the bench for repair 
or is placed in a maintenance queue. This model assumes that 
only one IMA test bench is available to service all WRAs. 
Moreover, although more than one type of WRA exists in 
reality, WRAsS are assumed to be indistinguishable; thus, the 
worst-case nature of this model is accentuated. 

In effect this model and the analytical one give no 
supply support to the squadron, a seemingly unrealistic 
state of nature. Nevertheless, since HACLS is not presently 
installed in operational squadron aircraft, the time to 
repair probability distribution is unknown. Therefore, 
because a distribution has to be assumed in any case, the 
Supply lag-time, if any, is aggregated with the maintenance 
time to repair. By considering maintenance to repair 
atietribution as containing times to replace faulty components, 
as well as the time awaiting parts not readily available 
from the supply system, one can see that realism is preserved. 

An estimate of the cost of computer facilities used to 
develop the computer simulation model is $1066. Estimated 


programmer time involved is 160 hours. 
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VI, INTERVAL AVAILABILITY 


Bo far, the discussion has concerned itself with point 
Pvatlability, the probability that a randomly selected HACLS 
memo at a random point in time, The interval availability, 
Baeune other hand, is defined as the expected fraction of a 
even interval of time that a system will be able to operate 
within its design tolerances [3], The symbol A* will be 


used to denote interval availability, 


A* = A exp(-A*'t), (5) 
where 
A = point availability determined from the analytical 
model: 


A* = the failure rate vector, for HACLS under its 
critical mission operating environment (eg, strike 


it IL aheen) oe 
and 
t = the vector of time in each HACLS mode, 
Assumptions needed for equation 5 are: (i) No start-up 


shock effect when HACLS shifts from one mode of operation to 
another. (11) Adverse effects associated with one HACLS 
operation mode are independent of those existing ina 
Subsequent mode. 

HOU a critical mission of 10 hours, for example, with 


HACLS in the non-operating flight mode for 1.98 hours, BIT 


O2 










mentor 0.02 hour, and standby flight mode for one hour, 


> \*t vector would be (0.1. 6,0, 5,0) dy, amd (Uo = is 


moo, 0,02, 8.0). Given an availability, A, of 0.975, for 


xample, 


m= 0,975 exp(-A*'t) = 0,933. 


93 





VII. PRESENTATION OF RESULTS 


Given the MDAC-E reliability figures for laboratory 


Seealure rate, ho? maintenance time to repair, U, assumed to 


be exponential, with a mean of 24 hours; and the P-3 
environmental k-factors, listed in Table I; the analytical 
model yields an A of 0.998 for the base case of one HACLS 
mepont per week, and maintenance efficiency, a, of 0.8, The 
Simulation, on the other hand, results in an asymptotic 
memeraptlitcy of 0.997, with the same initial parameter 
values. Equation 3 provides A = 0,998 to favorably compare 


with these results. The analytical model gives a 14 of 


/ 


0.949, the probability that HACLS is up at the beginning of 


an operating period, A,_, and A from the simulation equal 


St 
bess. 

In order to test sensitivity of the model to changes in 
reliability, R, the operational scenario may be varied using 
the T matrix shown in Table VI, Although this variation 
presumes much greater HACLS utilization in the simulation, 
it is considered for two reasons: i) to check the responsive- 
meso Of the model to an increased number of severe HACLS 
operating environments, and ii) to determine the effect of 
memty checks of HACLS on its point availability. 


Variations in mean time to repair, u, yield the results 


Shown in figure 9. The figure indicates that A is relatively 
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TABLE VI 


PREVIOUS HACLS MODE INDEX 
DAY MISSION 

ASSIGNMENTS 1 2 3 A 5 6 
1 (ALERT 1) 22 0 1.98 0.02 O 0 
2 (ALERT 2) De 0 1.98 0.02 0 0 
3 (OPERATIONAL 1) 13.5 10 0.48 0.02 0 O 
4 (OPERATIONAL 2) homed 0,48 0.02 O O 
5 (TRAINING A) 20.5 3 0.48 0.02 0 0 
6 (TRAINING B) 20,5 3 0.48 0.02 O 0 
7 (TRAINING C) 19.5 4 0.48 0.02 O 0 
8 (NON-FLY 1) 23.5 0 0.48 0.02 0 0 
9 (NON-FLY 2) 24 O 0 O O 0 


MODIFIED T MATRIX 


Entries are the number of hours by mission category that 


HACLS is in the various operating modes, 


O05 





misensitive to maintenance distribution, but is, of course, 
Sensitive to mean time repair, 

Maintenance efficiency, a, increased beyond 0.8 does not 
appreciably increase availability, as shown in figure 10, 
However, availability at a = 0,5 is significantly below that 
of a = 0.8, the base efficiency, 

The analytical model is exercised with variations in 
the number of HACLS flights per week, and the combined 
results are shown in Table VII, Results for A-6, P-3, and 
S-3A squadrons are summarized in Table VIII, It is clear 
from the above discussion that the semi-Markov model appears 
te be robust for non-exponential (non-Markovian ) cases 
examined empirically. 

On the basis of available numbers of aircraft by type, 


the total number of failures per year are [11] 


No Flights Pirate per Mee 
mao (324 A/C) 1eES 290 
S-3A (180 A/C) DO 115 
A-6 (384 A/C) 200 246 
metal (888 A/C) BES: 651 


Assuming the below listed percentages of failures for 


each WRA [11], the breakdown of failures by components is: 
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Ree NDT A oA 
PROOF OF THE THEOREM, 


Since A exists, then for any ¢ > O, there exists 


a cE Emen that A —- © s A(t) < A + € when t > t. 





i ce i 
A(s)ds = A(s)ds + A(s)ds, 
0 0 1E 
€ 
so that 
t. ip t ie t | 
A(s)dst (A-€ )dSs< A(s)ds< A(s)dst (Ate )ds. 
6 O O t 


8) 
) 


Now dividing by t in the inequality above, and letting t-- 


15 
“a(s)ds = O, 
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t Cia te) 


EE -+00 + (Ate )ds = Lim( Ate )———— = 
{->0o 
Ce 
so that 
1 IE 
A-e < lim, a Mes ds < A + € 


0 


mmce € 1S arbitrary, liet ¢ > 0. Then, 


te 

: 1 

A < lim, ie ACsjds < A, 
0 
ec. 

1 tc 

Lim, .,.. 7 A(s)ds = A, Then 
O 


recall that 


-upt*? |. 2% 
ACs)ds, so that 


eee ci, ) 
Lim E my) = a 
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APPENDIX B 


P-3 78840 is the number of aircraft 
NO. HACLS FLIGHTS hours in one year of P-3 squadron 
Operations (9 a/c x 8760 hours/year). 
fe k kt 
78840 - 11680 = 67160 0.01 671.6 
E99 X 30 = 10950 Ole db 1095 
Seo x (1.98)(2) = 14454 1 1445.4 
Boo X (0.02)(2) = 14,6 6 87.6 
0 5 0 
0 6 O 
sea = Kaye = 0:04176 
1 FLIGHT PER WEEK 
78840 - 12514 = 66326 C201 663.26 
6 24+313x30 = 10638 Om T0637. 5 
@enwo(!.98)4+313(2)(1.98) = 1548.4 1 1548.4 
mees( O.02)4+313(2)(0.02) = 15.64 6 93.84 
mex 5.98 + 0 = 310.96 5) 1554.8 
22 xX 0.02 = 1.04 6 6.24 
k = 0.0625 
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2 FLIGHTS PER WEEK 

78840 - 12618 

max 24+261x30 
jmeaxo(1.98)+261(2)(1.98) 
mx 3(0.02)+261(2)(,.02) 
104 x 5.98 


moa x 0.02 


6 FLIGHTS PER WEEK 
78840 - 12246 

gx o0T313x24 

Me ( 1 .98)+313x3(1.98) 
meres 0.02 )+313x3(0.02) 
fee O + 313 x (5.98) 


oo x (0.02 


ie 
66222 
10326 
1651.32 
16,68 
621.92 


2,08 


= 0.0832 
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oO 


SO 


kt 
662.22 
1032.6 
Gil ee 
100.08 
3109.6 


12.48 


665.94 
SAU 

2065.1 
125.16 
0408.7 


37.56 
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APPENDIX C 


The entries in P, are calculated as follows. 


Let 0O(s) be the Laplace transform of the density function 








mor O.. 
a 
Then, | 
eet ay) 
2 - aie i vs 
pebyj-21X,-1,0;ul= sor7u * ati/n ° 
and 
: 2 je 
Prly, 1|X. iL] At1/y + At+1/u Chea qb) 
Sunce, letting O(t) = Pr{O, < t], 
ey =| xX .=1)= (ethe Uy qocuy 
O 
= g0(u)} +h f PN dou) 
O O 
= g + h0(8), 

_ _A = yi = : 
where g = <a h SLA and 8 ye =P LT 
Likewise, 

Be (yY.=2)/X.=1) = 0, 
a il 
Es =) oe ae 
Pr{Y,=3|X,=1] = 34475 (1+0041/u)1, 
a = = ae 
Pr{¥j=1]X5=2) = spp77 (1-00+1/n)1, 
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The 


Bor 


Pr [Y.=2|X.=2] 
1 ac 
Pr[Y.=3|X,=2] 
1 1 


Pr [Y.=1|X.=3] 
1 als 

Pr [Y. =2|X.=3] 
al 1 


Pr{Y.=3|X.=3] 
a 1 


entries in P, 


= 0, 


ape Logan O(At1/u), 


~ AEL/y ive 


a r 
= ee [1-O0(A+1/y)] : 


a ae 
A+1/u oben 


O(At+1/u). 


are calculated in a Similar way. 


Let I(s) be the Laplace transform of the density function 


i 
il 


men , 


and 


fgex 1 |Y.=1) = Ge 


mix. .,7-2|Y,=1) = 1-I(A), 


Bex. .,=3/Y,=11 =" 0; 


Paix 4-1/¥,=3] 


a /U 
Ties FO)-1aM)1, 


tl 


— 


Pr[{X,,,=2[Y,=3] = afis 3 AT (4/u) apy 
itl 1 


PriX,, SNE 


1/u-d 1/y-A 


= 1-1(1/u)- gFAQU@)-10/u)1, 
aa (5) 1). 
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